Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/517612-d4ff-4dcf-af7a-2981728e9d6f/1/vp-taLDuXsyl-djVF0C1JgmMvbk.mft
File:                     vp-taLDuXsyl-djVF0C1JgmMvbk.mft (raw, json)
Hash identifier:          bQonWdyeL0qW/PYs9sJjnjGC6brOKp/OVg+9QxAfeMA=
Subject key identifier:   2A:B3:E6:64:7A:96:1A:06:73:67:FF:E5:7F:C3:65:8F:6F:30:66:7B
Authority key identifier: BE:9F:AD:68:B0:EE:5E:CC:A5:F9:D8:D5:17:40:B5:26:09:8C:BD:B9
Certificate issuer:       /CN=be9fad68b0ee5ecca5f9d8d51740b526098cbdb9
Certificate serial:       01A0D124BFA49C63B9EB94CB7987FE88AB78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vp-taLDuXsyl-djVF0C1JgmMvbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/517612-d4ff-4dcf-af7a-2981728e9d6f/1/vp-taLDuXsyl-djVF0C1JgmMvbk.mft
Manifest number:          01BA
Signing time:             Thu 24 Sep 2026 02:00:41 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:41 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:41 +0000
Files and hashes:         1: 07sah0NnQZWpGidTlXB7fdm296o.asa (hash: 8mzOawtirTWpJIGxMFep5JeroTrD9KMBn32MsKpltmI=)
                          2: vp-taLDuXsyl-djVF0C1JgmMvbk.crl (hash: Nxi1TC951s3k+s7djzSc35RAnJYGOBHQfclcmmDJKe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/517612-d4ff-4dcf-af7a-2981728e9d6f/1/vp-taLDuXsyl-djVF0C1JgmMvbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/517612-d4ff-4dcf-af7a-2981728e9d6f/1/vp-taLDuXsyl-djVF0C1JgmMvbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vp-taLDuXsyl-djVF0C1JgmMvbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 02:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:bf:a4:9c:63:b9:eb:94:cb:79:87:fe:88:ab:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9fad68b0ee5ecca5f9d8d51740b526098cbdb9
        Validity
            Not Before: Sep 24 02:00:41 2026 GMT
            Not After : Sep 25 02:00:41 2026 GMT
        Subject: CN=2ab3e6647a961a067367ffe57fc3658f6f30667b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:70:22:aa:c0:ea:17:f2:ab:0b:0d:19:8b:41:
                    28:03:95:ae:41:5a:ae:50:63:6e:64:64:c5:17:fa:
                    bb:41:44:4d:65:1d:91:15:67:ea:01:2a:07:19:6c:
                    d8:80:b9:61:56:ed:a3:9d:7c:df:22:55:3e:dd:11:
                    aa:35:c9:b1:a3:3b:58:1d:08:fc:62:5c:a0:36:93:
                    cb:9d:ff:50:a2:1c:43:87:c4:42:a7:bc:a7:0e:e7:
                    51:72:73:0a:4a:fa:5f:aa:a3:3f:2e:e9:74:29:d1:
                    ea:07:5d:12:58:17:09:4e:8e:75:20:8d:65:bd:22:
                    51:28:4b:84:d4:3c:cf:9d:08:93:98:ad:36:79:4a:
                    fc:86:d6:79:50:e5:22:05:e0:5b:6c:8b:f0:6c:53:
                    77:b4:b2:eb:27:33:2e:84:33:d8:a0:d9:0e:79:8b:
                    a9:84:7d:e0:fe:56:cd:e5:7e:9f:5d:3a:46:2d:35:
                    b3:7c:af:21:b5:96:8d:3b:83:fd:94:dc:56:6d:c7:
                    f7:fa:a4:e9:98:06:60:92:38:b6:40:ba:dc:72:66:
                    69:85:6b:0d:ed:29:04:68:be:ee:cd:ec:2a:86:b8:
                    92:db:0b:be:c2:84:8e:2e:13:dd:62:d6:10:ff:63:
                    3e:3c:c7:51:1f:24:2b:5c:72:fe:df:1e:f1:2e:73:
                    22:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B3:E6:64:7A:96:1A:06:73:67:FF:E5:7F:C3:65:8F:6F:30:66:7B
            X509v3 Authority Key Identifier:
                keyid:BE:9F:AD:68:B0:EE:5E:CC:A5:F9:D8:D5:17:40:B5:26:09:8C:BD:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp-taLDuXsyl-djVF0C1JgmMvbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/517612-d4ff-4dcf-af7a-2981728e9d6f/1/vp-taLDuXsyl-djVF0C1JgmMvbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/517612-d4ff-4dcf-af7a-2981728e9d6f/1/vp-taLDuXsyl-djVF0C1JgmMvbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7e:52:ec:e2:95:43:24:86:99:71:f1:33:6d:e5:5c:c4:be:
         1d:6b:fb:96:52:00:c6:6f:96:f3:6a:cb:7c:bf:20:57:42:0d:
         00:f2:c1:c1:46:20:9e:27:4b:26:1f:cb:16:de:7c:08:26:10:
         61:ba:6d:71:2e:cb:6a:f5:61:df:8b:5d:ff:96:34:45:c2:09:
         db:d7:20:0b:10:50:06:30:6c:d8:3f:b6:d3:49:b5:22:9a:42:
         7b:5a:dd:0a:41:61:2a:74:f6:f5:83:cd:65:b1:30:16:3b:5c:
         04:7f:1e:a3:95:dd:9e:8c:5a:03:3c:0b:7b:db:be:0c:dc:bb:
         21:6d:ee:a7:9b:5f:06:4d:a1:04:c4:ec:49:33:50:4b:da:a1:
         ff:af:56:f0:05:98:e5:b9:3b:af:61:32:7a:4a:ce:b7:3d:7d:
         8b:c6:4b:b8:47:4b:77:a0:df:2c:a2:84:05:d3:d8:a9:77:fa:
         f3:b1:e3:d9:a3:e5:ec:37:44:d4:46:0f:62:48:48:ad:4a:7e:
         4d:32:af:91:96:68:8c:30:24:cd:92:ba:b9:72:a2:07:ba:b9:
         bc:c8:35:8f:c8:a7:c3:93:f0:a7:b8:7d:1c:60:bf:70:ec:fe:
         3d:18:17:b9:1a:6d:da:cc:e1:8f:29:8b:2f:23:ab:c6:f8:21:
         73:25:45:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:13:21 2026 by rpki-client